Symantec Messaging Gateway cannot do FIPS mode secure LDAP queries against a Domino 8.5 server

Products

• Messaging Gateway

Issue/Introduction

Symantec Messaging Gateway (SMG) cannot make SSL secured LDAP queries against a Domino 8.5 server when running in FIPS secured mode.

Cause

Domino  8.5 does not support TLS 1.0 which is required by secure LDAP connections in FIPS mode.

Resolution

This is a known issue with Domino 8.5. Customers wishing to run SMG in FIPS secured mode will need to make architectural accommodations if using Domino 8.5 as their directory server and LDAP connections must be encrypted.

Unencrypted LDAP data sources are unaffected by this issue.

To ensure that the Domino LDAP data source is not using SSL encryption

1. Log into the Control Center as an administrator
2. Navigate to Administration -> Directory Integration 
3. Select your Domino 8.5 data source and click 'Edit'
4. Confirm that the SSL checkbox is not checked

Applies To

• SMG in FIPS mode
• SSL secured DDS/LDAP connector to a Domino 8.5 directory server